Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/1qkhrcwlR7clN_xQBUIWMGEQSTc.roa
File: 1qkhrcwlR7clN_xQBUIWMGEQSTc.roa (raw, json)
Hash identifier: XOPi17mTMcpKdE7VRJqdsD8mtPZ0OanLY9w97JrNNlc=
Subject key identifier: D6:A9:21:AD:CC:25:47:B7:25:37:FC:50:05:42:16:30:61:10:49:37
Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce
Certificate serial: 0192AF0E84180385D72DD3A6729080207795
Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/1qkhrcwlR7clN_xQBUIWMGEQSTc.roa
Signing time: Mon 21 Oct 2024 12:30:16 +0000
ROA not before: Mon 21 Oct 2024 12:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 83.217.9.0/24 maxlen: 24
83.217.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:af:0e:84:18:03:85:d7:2d:d3:a6:72:90:80:20:77:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce
Validity
Not Before: Oct 21 12:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6a921adcc2547b72537fc500542163061104937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7d:47:ec:38:a2:af:4c:d0:bc:9f:84:0f:58:
48:f2:41:31:c9:35:b1:62:bf:96:3d:c0:10:85:fc:
4c:57:b8:76:06:e0:a5:c9:99:84:a3:c2:47:79:93:
7c:95:a9:f1:4b:3b:7e:d8:d1:ea:5d:f6:40:41:54:
1d:a3:80:10:fa:75:09:61:f9:13:25:87:9f:c2:10:
a5:8d:b6:02:3c:0b:92:b0:f8:34:2f:9a:80:10:04:
03:96:e3:33:be:ab:33:ae:6c:d1:f7:e4:ef:80:61:
96:57:05:2a:e0:40:0c:b8:28:1c:fa:7c:72:d2:70:
5c:14:1f:78:b6:f2:f4:b4:77:32:e5:62:b5:8e:7b:
5c:ce:f0:47:e6:d2:96:48:a4:30:c1:4e:cd:90:5d:
d9:34:55:6e:2a:4e:19:e0:77:03:66:d4:68:d3:b7:
0b:14:20:ef:b8:7b:df:59:fe:f6:09:ee:1b:9a:c2:
3a:c8:a7:43:d5:5f:50:ce:d0:fe:db:fb:24:1d:50:
53:f2:8c:cf:f3:dd:6a:07:3a:35:86:64:30:f4:70:
cb:27:e5:11:48:79:5b:05:6f:86:0d:dd:73:d1:c9:
18:d5:72:28:9c:35:83:0c:82:6a:f1:e6:0c:51:b7:
6c:4c:f5:26:3e:4d:e9:6b:09:f9:0b:8a:de:91:5a:
75:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A9:21:AD:CC:25:47:B7:25:37:FC:50:05:42:16:30:61:10:49:37
X509v3 Authority Key Identifier:
keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/1qkhrcwlR7clN_xQBUIWMGEQSTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.9.0/24
83.217.11.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:0f:81:1d:a6:50:36:32:f7:e3:fb:d2:45:de:13:51:d2:27:
e4:6a:64:79:30:78:77:09:3d:fc:c2:ab:95:a9:2d:6c:72:c1:
ed:95:b7:d0:fe:40:46:1a:8b:da:58:f6:cf:7b:81:91:3b:b1:
95:08:40:bc:61:4c:dc:82:00:78:93:4e:02:b4:91:11:6b:e9:
71:39:ad:19:cd:2b:72:4d:4f:7e:3e:5a:8b:71:42:f4:b9:4b:
ea:39:5f:e2:5f:d6:1e:43:95:9f:79:91:98:99:78:e7:f5:d9:
e7:a8:37:62:8b:03:ee:a5:b3:62:48:ca:39:81:da:af:4f:b7:
69:49:75:36:d0:83:71:86:a5:d4:84:cc:f1:18:18:76:11:ce:
47:da:d0:fa:87:13:53:eb:f4:da:bc:2f:d5:5b:de:07:d4:e0:
7b:d9:0c:2f:85:9b:7a:c5:53:07:4e:b2:65:c2:bf:a4:d8:36:
ca:31:0e:89:41:9d:25:29:6c:d7:74:38:fb:fe:1d:b5:72:94:
83:06:15:9c:81:08:e6:20:60:3a:e9:b2:70:a2:fc:88:d0:da:
ce:ef:25:39:1a:71:6c:ad:4c:4e:e3:6f:87:45:31:20:30:3d:
2f:c5:ee:74:2b:3d:ac:97:f4:44:de:7d:ed:79:1c:c5:4f:82:
0a:b1:54:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:50 2025 by rpki-client